drewfax
drewfax on Hacker News
Posted by
drewfax on Tuesday October 20, 2026 @08:45AM
from the forum.openwrt.org dept.
Can someplease explain what is a distillation attack?
> The court noted that recently there have been growing efforts globally to limit internet access for children below a certain age, especially social media platforms, “in the name of their safety”. However, upon “anxious consideration”, the court decided not to endorse the same.
It's relieving to hear this from the Supreme Court, considering the fact that the current Modi government's usual approach to any problem is banning internet access.
Posted by
drewfax on Saturday October 17, 2026 @09:40AM
from the scroll.in dept.
Posted by
drewfax on Thursday October 15, 2026 @01:01PM
from the theverge.com dept.
They've mentioned "requests / 5 hr" limits for each model, which I presume is max number of requests for that model.
Yeah I am confused by their pricing explanation. All I get is there's some kind of throttling.
> For example, non-Samsung Android OEMs aren't allowed to directly sell devices with GrapheneOS and Google will only permit it within a quota.
Wow, that is so cheap of Google. That company has lost all it's values and deserves to die.
They built their empire with open source projects including Debian, KDE's KHTML (Webkit predecessor), Linux kernel, MySQL etc. But now, these leeches won't even allow OEMs to use different flavor of Android.
Linux kernel introduces bug fixes, new features, and major systemic changes all the time. That’s why using SemVer for Linux is pointless and why Linus dropped it.
If anyone assumes their AI chats are private, they must be stupid. Of course, all AI companies are going to evaluate chat sessions for improving their models whether it's disclosed in the privacy policy or not. They're investing tonnes of money into this, so your privacy is a negligible problem for them.
Nothing surprising here. AI is a tool just like an IDE, debugger, etc. All the regular tasks like coding, testing and review still holds true. Developer is still responsible for their work. Reviewer is responsible for ensuring code quality and standards. As long as the submitted code is of high quality and does not violate copyright, AI is not a concern.
It's stupid only when an organization refuses to understand AI is a text prediction software and thinks it can replace humans in coding, testing, reviewing etc.
That's how the system or browser should be configured. Secure by default and any insecurity must be an opt-in. But Google won't do it because their websites are JS heavy monster trucks and millions of websites run their tracking scripts which require JIT enabled by default for optimal page load.
That is the point and business of Quad9. It's not their fault for you not knowing what Quad9 is.
I don't want my family to get malware from sketchy websites. Quad9 offers a simple solution for these usecases. I'll take the false positive anyday over unfiltered DNS.
So other projects are not supposed to critize Google? Graphene's focus is on security and they complain about lack of security in your products. Seems valid to me.
Also security and using non-Google OS are not niche usecases. I'm not sure how you are working on Android, the most popular OS while claiming security is a niche usecase. In fact, I have less confidence in security of your work.
New generations don't 'browse' web anymore. They 'consume' YouTube, Instagram, Android TV and other walled gardens. These generation don't even know they could change contents being displayed on their device to their wish. For them it's just whatever the app shows. They don't understand Web, extensions, DNS etc. I don't have hope for new generations. We're are the old men now yelling at AI and App Stores.
That's why Brave probably built an in-built adblocker written in Rust. Works great on both desktop and mobile.
Now they are doing it to Android with mandatory developer identity verification and Play Integrity. I wonder how those engineers sleep at night.
How would it work? Isn't it easy for the authorities to check the list of users on the device?
I suspect this is either some ground work for planting a future backdoor or a noob who found out there's a ~/.cache directory.
Yes, UPI works. But it's a terrible system for privacy and autonomy. It has so many intermediaries, requires phone number and linked to person's identity. It should not be called a peer-to-peer payment system in anyway. It is controlled by the government rather than Visa or Mastercard. That's the only the difference.
I too use ASUS RT-AX53U. Decent hardware. But stock firmware was terribly slow. IPv6 didn't even work.
I heard OpenWrt when I searched how to fix the stock firmware. Flashed it and never turned back. Now, OpenWrt is a critical infra in my house for adblocking, DoH, Firewall, Network Segmentation etc. None of these are possible with the stock firmware.
Posted by
drewfax on Wednesday July 01, 2026 @11:00PM
from the f-droid.org dept.
Similar experience. I bought an ASUS router and enabled IPv6. It slowed down everything down. Immediately flashed OpenWrt on it, IPv6 works like charm.
It's usually bad configuration done by the router vendors. It doesn't mean IPv6 is bad.
That completely goes against what they're working towards. I understand why you would want to root your own phone, but GOS is targeting highest security standards and root ain't one of them (for good reason).
Some things Mozilla could have done correctly:
- Kept Rust and sold best-in-class tooling like IDEs to enterprises.
- Polished Firefox OS and distributed apps in their store for a 1% commission.
- Kept Servo and made the most secure and fast browser that no one else had made.
- Partnered with OEMs to offer Firefox as the default browser.
Yet the best they could do was pay their CEO for nothing.
Firefox OS was a brilliant idea. Imagine cross platform and open apps based on HTML/JavaScript that feel native and polished. 2026 would have been amazing if Mozilla executed it right.
Extensions were why Firefox was so popular among those considered 'abnormal.' Chrome just copied the idea. VPNs, Pocket, and sync services are all great features; it's their implementation and execution that is so poor.
All Mozilla (and Firefox) needs is to be run by developers, not the fucking MBAs.
Posted by
drewfax on Tuesday June 09, 2026 @08:47PM
from the bugzilla.mozilla.org dept.